Copyright 2024 - OS2World - Contact us

News

ClamAV Multiple Denial of Service Vulnerabilities

Some vulnerabilities have been reported in ClamAV, which can potentially be exploited by malicious people to cause a DoS (Denial of Service).

1) A NULL-pointer dereference error exists within the "cli_scanrtf()" function in libclamav/rtf.c. This can potentially be exploited to crash ClamAV via a specially crafted RTF file.

2) A NULL-pointer dereference error exists within the "cli_html_normalise()" function in libclamav/htmlnorm.c. This can potentially be exploited to crash ClamAV via a specially crafted HTML file containing a "data" URL scheme.

The vulnerabilities are reported in versions prior to 0.91.2.

The recomendation is to update to version 0.91.2.

The original advisory can be found at ClamAV project page .

OS/2-eCS-ArcaOS General News

OS/2-eCS-ArcaOS Software News

Latest Forum Posts

WarpStock and OS/2-eCS-ArcaOS Event News

Site News

f t g m